From 6c45c474973c2dc2fbb372a117723e186ec7020e Mon Sep 17 00:00:00 2001 From: Lynne Date: Wed, 14 Nov 2018 00:04:50 +1000 Subject: [PATCH] logout on failure --- web.py | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/web.py b/web.py index 6a19643..5c4efc8 100755 --- a/web.py +++ b/web.py @@ -56,10 +56,12 @@ def main(): def home(): if 'acct' in session: dc.execute("SELECT * FROM data WHERE username = %s AND instance = %s", (session['username'], session['instance'])) - #TODO: if this fails, redirect to /logout data = dc.fetchone() - for item in ['username', 'instance', 'avi', 'secret', 'client_id', 'client_secret', 'cc', 'ccavi']: - session[item] = data[item] + try: + for item in ['username', 'instance', 'avi', 'secret', 'client_id', 'client_secret', 'cc', 'ccavi']: + session[item] = data[item] + except: + return redirect('/logout') #TODO: not good UX if 'cc' not in session: session['cc'] = "None"